Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to implement some better control for passwords on a our slackware servers. I have always manually done this but the need for some automation routines to handle a lifetime check, length, complexity and history. Does anyone know of a utility that can assist me in this regard?

share|improve this question
up vote 2 down vote accepted

For password lifetimes, you can set the maximum age in /etc/login.defs. For length and complexity checks, that's a feature of pam_cracklib, which should be enabled somewhere in /etc/pam.d/. You can read the man page for a list of all the options.

Unfortunately I haven't seen anything that keeps track of a password history, the best cracklib can do is compare against the previous password.

share|improve this answer
Slack doesn't do PAM. Or it hasn't done it in the past, I haven't played with it in a while. You can always test your shadow file with John the Ripper and some wordlists. – Marcin Aug 11 '09 at 16:49
pam_cracklib can remember more than 1 previous password. The documentation suggests that the realistic limit to this is about 400 previous passwords per user due to internal limits. – Travis Campbell Aug 11 '09 at 21:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.